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ULTRASOUND IMAGING SYSTEM 
HAVING VIRUS PROTECTION 



FIELD OF THE INVENTION 

This invention generally relates to ultrasound 
imaging systems* In particular, the invention relates to 
methods for providing protection against computer viruses. 

BACKGROUND OF THE INVENTION 

The use of computerized ultrasound imaging 
5 systems in the medical industry is widespread. Modern 
ultrasound imaging systems have the capability of 
communicating with other systems and other devices via 
networks, including local area networks, corporate 
intranets and the Internet. For example, ultrasound imaging 

10 systems are capable of transferring images to various types 
of remote devices, such as storage devices and printers, 
and receiving worklists from remote worklist brokers, via 
communications networks using the DICOM (Digital Imaging 
and Communications in Medicine) protocol. Images can also 

15 be sent from and message sent to an ultrasound imager over 
the Internet using the TCP/IP protocol. Images and/or 
operational data are also transferred from remotely 
situated ultrasound imaging systems to a central service 
facility via networks for the purpose of diagnosis. 

2 0 Conversely, service facilities have the capability of 
loading programs and data into remote ultrasound imaging 
systems via networks. 

As ultrasound scanners become networked to 
transfer information to and from the machine, the risk of 
25 computer viruses being installed on the scanner greatly 
increases. There is a need for a method of protecting an 
ultrasound imaging system against computer viruses. 

Furthermore, ultrasound imager manufacturers or 
service providers who provide the computer programming 

1 
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used by an ultrasound imaging system prohibit the 
installation of unauthorized software on the system. 
Obviously, in order to be in a position to guarantee the 
integrity of the system software, e*g., pursuant to an 
5 equipment warranty or service contract, that software 
must remain under the control of that manufacturer or 
service provider* Software integrity cannot be guaranteed 
if persons having access to the system are able to add 
software to the system or alter the software already 
10 resident in the system. Thus, there is also a need to 
provide protection against the installation on the 
imaging system of unauthorized software. 

SUMMARY OF THE INVENTION 

The present invention is directed to an 
ultrasound imaging system having software for protecting 

15 the system against viruses. As used herein, the term 
"virus" means any program or piece of code that is loaded 
into the imaging system without the manufacturer's or 
service provider's knowledge and permission. In accordance 
with one protection feature, files are screened for the 

20 presence of known viruses before they are installed on the 
hard disk of the imaging system. In accordance with another 
protection feature, any time an application is started, the 
application is checked to ensure that its presence on the 
system is authorized. 

25 In accordance with the preferred embodiment of 

the invention, each file that enters the system (via the 
hard disk or the networking port) is scanned to detect 
the presence of any virus in the file. Before each file 
is written to the hard disk of the scanner, the Checksum 

30 and Size of the file are verified, along with other 
virus-identifying attributes, to determine if the file is 
infected with a virus or if the file itself is a virus. 
If there is a discrepancy in either the Checksum or Size, 
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then a dialogue box appears, warning the system operator 
that the file being installed may contain a virus. The 
system operator is given the options of continuing or 
canceling. If the operator elects to continue, the 
5 suspicious file is written to the scanner's hard disk and 
an entry is placed in a virus log. If the operator elects 
to cancel, then the suspicious file is not written to the 
scanner's hard disk and no entry is made in the virus 
log. 

10 In order to provide additional protection for 

the ultrasound scanner, any process starting to run on 
the scanner is monitored. The monitoring operation will 
be performed whenever the scanner has received an 
instruction reguiring it to execute an application 

15 program not yet copied from the hard disk to system 
memory. Each time a new process is started on the 
scanner, a virus protection monitor will suspend 
execution of the process and search in a Registry table 
for an entry matching a code identifying the starting 

2 0 process. If the starting process is listed in the table, 
then the suspension of execution of the authorized 
process is removed without the system user ever knowing 
what happened. If the virus protection monitor does not 
find the matching identifier in the Registry table, then 

25 a dialogue box appears on the screen, warning the system 
operator that the application may be a virus. The system 
operator is given the options of cleaning, canceling the 
process or adding. If the operator elects to clean, then 
execution of the unauthorized process is prevented, the 

30 file that started this process is removed and an entry is 
placed in the virus log. If the operator elects to 
cancel, then execution of the suspicious process is 
prevented, the file that started this process is not 
removed and an entry is placed in the virus log. If the 

35 operator elects to add, then another dialogue box appears 
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requesting confirmation. If the system operator confirms, 
then the process identifying code is encrypted and then 
added to the Registry table, and an entry is made to the 
virus log. If the system operator declines to confirm, 
5 then the confirmation dialogue box disappears, again 
exposing the alert dialogue box. 

The Registry table is prestored on the hard 
disk and updated as new authorized application programs 
are installed. The virus protection monitoring software 
10 communicates with the Registry table via an 
encrypter/ decry pter ♦ 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram showing a conventional 
ultrasound imaging system of the type which can be 
programmed with virus protection software. 

15 FIG. 2 is a block diagram showing an ultrasound 

imaging system having a network connection for 
communicating with remote devices. 

FIG. 3 is a block diagram showing a portion of an 
ultrasound imaging system having virus scanning software in 
20 accordance with the preferred embodiment of the invention. 

FIG. 4 is a block diagram showing a portion of an 
ultrasound imaging system having virus protection 
monitoring software in accordance with the preferred 
embodiment of the invention. 

25 FIG. 5 is a schematic showing an Alert dialogue 

box which appears on the display monitor of the ultrasound 
imager when the virus scanning software in accordance with 
the preferred embodiment of the invention determines that a 
file being written to the hard disk may contain a virus. 
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FIG. 6 is a schematic showing an Alert dialogue 
box which appears on the display monitor of the ultrasound 
imager when the virus protection monitoring software in 
accordance with the preferred eifobodiment of the invention 
5 determines that a file told to execute may contain or be a 
virus . 

FIG. 7 is a schematic showing a Confirm dialogue 
box which appears on the display monitor of the ultrasound 
imager when the system operator is asked to confirm his/her 
10 instruction to add a suspicious process to a registry which 
lists approved processes. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 

FIG. 1 shows a conventional computerized 
ultrasound imaging system which can be programmed with 
software for detecting the presence of viruses in 

15 accordance with the preferred embodiments of the invention. 

The type of imaging system depicted in FIG. 1 has a B mode 
whereby the imager creates two-dimensional images of tissue 
and/or blood flow in which the intensity of each pixel is a 
function of the amplitude of the echo returned from a 

2 0 corresponding sample vol\ime. The basic signal processing 
chain is as follows. An ultrasound transducer array 2 is 
activated by a transmitter in a beamfo3rmer 4 to transmit an 
acoustic burst which is focused at a point or zone along a 
scan line. The return RF signals are detected by the 

25 transducer elements and then dynamically focused to form a 
receive beam by a receiver in the beamformer 4. The receive 
beamformer output data (I/Q or RF) for each scan line is 
passed through a B-mode processing chain 6, which 
preferably includes demodulation, filtering, envelope 

30 detection, logarithmic compression and edge enhancement. 
Depending on the scan geometry, up to a few hundred receive 
vectors may be used to form a single acoustic image frame. 
To smooth the temporal transition from one acoustic frame 
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to the next, some acoustic frame averaging 8 may be 
performed before scan conversion. In general, the log- 
compressed display data is converted by the scan converter 
10 into X~Y format for video display. On some systems, 
5 frame averaging may be performed on the X-Y data 
(indicated by dashed block 12) rather than the acoustic 
frames before scan conversion, and sometimes duplicate 
video frames may be inserted between acoustic frames in 
order to achieve a given video display frame rate. The 

10 scan-converted frames are passed to a video processor 14, 
which maps the video data using a gray-scale mapping. The 
gray-scaled image frames are then sent to a video monitor 
18 for display. System control is centered in a host 
computer 20, which accepts operator inputs through an 

15 operator interface 22 and in turn controls the various 
subsystems. (In FIG. 1, only the image data transfer paths 
are depicted.) The operator interface comprises a keyboard, 
a trackball, a multiplicity of pushbuttons, and other input 
devices such as sliding and rotary knobs. During imaging, a 

20 long sequence of the most recent images are stored and 
continuously updated automatically in a cine memory 16. 
Some systems are designed to save the R-6 acoustic images 
(this data path is indicated by the dashed line in FIG. 1) , 
while other systems store the X~Y video images. The image 

25 loop stored in cine memory 16 can be reviewed via trackball 
control, and a section of the image loop can be selected 
for hard disk storage. 

The host computer controls the various 
subsystems in accordance with operating instructions 

30 which are stored on a hard disk and then copied to system 
memory when the system is powered up. There are two basic 
ways in which files may become installed on the hard disk 
of the scanner. The first way is through physical media 
such as CD-ROM, MOD, etc. The second way is via a 

35 network. 
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In accordance with the preferred embodiments of 
the invention, the host computer of an ultrasound imaging 
system is programmed with virus protection features. For 
example, a hacker at a remote device 30 may attempt to 
5 send a file having a virus embedded therein to the 
ultrasound imager via a remote network connection 26, a 
network 28 and the imager network connection 24. The 
network 28 may comprise a local area network, a wide area 
network, a corporate intranet, the Internet, or any other 

10 network system, including a system of networks 
interconnected via gateways. The network connections 
typically each comprise a networking port and suitable 
networking software for formatting the data in accordance 
with the appropriate network protocol. In accordance with 

15 the preferred embodiment, before the infected file is 
installed on the hard disk 21, the host computer 2 0 will 
scan the infected file for the presence of viruses. If a 
possible virus is detected, the host computer sends an 
Alert dialogue box to the video memory 11 (part of the 

2 0 scan converter in FIG. 1) and a command to the video 
processor 14. In response to the command, the video 
processor 14 retrieves the dialogue box from the video 
memory and sends it to the display monitor 18 for 
display. As described in detail below, the dialogue box 

25 presents the system operator with optional responses to 
the virus alert. The system operator selects a response 
using the operator interface 22. The host computer 20 
then takes appropriate action based on the system 
operator response. 

30 In accordance with one feature of the preferred 

embodiment (which feature is shown in FIG. 3) , each file 
that enters the system (via the hard disk or the 
networking port) is scanned by virus scanning software 32 
to detect the presence of any virus in the file. Before 

35 each file is written to the hard disk 21 of the scanner 
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by the operating system software 36, the Checksum and 
Size of the received file is verified, along with other 
virus-identifying attributes, to determine if the file is 
infected with a virus or if the file itself is a virus. 
The Checksum is a known error-detection scheme in which 
each transmitted file is accompanied by a numerical value 
based on the number of set bits in the file. The 
receiving station then applies the same formula to the 
file and checks to make sure the accompanying numerical 
value is the same. If not, the receiver can assume that 
the file has been garbled or infected with a virus. If 
there is a discrepancy in either the Checksum or Size, 
then the virus scanning function 32 sends an Alert 
dialogue box to the video memory 11 for display. The 
Alert dialogue box contains a warning that the received 
file may contain a virus. The content of this displayed 
Alert dialogue box is generally shown in FIG. 5. The 
system operator is given two options respectively 
represented by the virtual Continue button 42 and the 
virtual Cancel button 44. The system operator may elect 
to continue installing by clicking on Continue button 42 
or may elect to cancel the installation by clicking on 
Cancel button 44. Clicking may be performed by any 
conventional means, including, for example, a mouse or a 
trackball coupled with a Set key. 

Returning to FIG. 4, if the system operator 
clicks on the Continue button using the operator 
interface 22, the virus scanner 32 will instruct the 
operating system 3 6 to proceed with installation of the 
suspicious file on the hard disk 21. Also the virus 
scanning function places an entry in a virus log 34, 
which is maintained on the scanner. The virus log is in 
ASCII format and is written to by the virus scanner 32. 
The virus log 34 contains only one type of entry. That 
entry is defined as follows: 
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Date: Time: Current Logged in User: Process in Question: Action User Took 

If the system operator clicks on the Cancel 
button using the operator interface 22, the virus scanner 
32 will instruct the operating system 3 6 to not install 
5 the suspicious file on the hard disk 21. In that case no 
entry to the virus log 34 is made. 

In accordance with another feature of the 
preferred eiabodiment (which feature is shown in FIG. 4) , 
any process starting to run on the scanner is monitored. 

10 The monitoring operation will be performed whenever the 
scanner has received an instruction requiring it to 
execute an application program not yet copied from the 
hard disk to system memory. Each time a new process is 
started on the scanner, the operating system 36 will send 

15 notification to a virus protection monitor 38. The virus 
protection monitor 38 comprises software for monitoring 
each starting process. For each starting process, the 
operating system 3 6 will copy the appropriate application 
program from the hard drive 21 to the system memory, but 

20 will suspend execution of the program until instructed to 
resume by the virus protection monitor 38. The operating 
system sends the identifying code of the process being 
run to the virus protection monitor 38, which then 
searches in a Registry table 4 0 to determine whether the 

25 identified process is authorized. 

In accordance with the preferred embodiment of 
the invention, the Registry table 40 is an encrypted file 
on the hard disk that contains a list of all processes 
that are approved by the system manufacturer or service 
30 provider to run on the scanner. Entries are made to this 
table manually by the field engineer or automatically by 
software applications written by the manufacturer or 
service provider and being installed on the system, i.e., 
the entry is written in the Registry table at the time 

9 
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when the software application is written to the hard 
disk. When a software application not written by the 
manufacturer or service provider is installed to the hard 
disk, no entry will be placed in the Registry table, 
5 thereby making such unauthorized software detectable at 
startup . 

In accordance with one preferred embodiment of 
the invention, the virus protection monitor 38 reads the 
encrypted data from the Registry table. On the way to the 

10 virus protection monitor, the encrypted data read out of 
the Registry table 40 is decrypted by an 
encrypter/ decrypt er 39, The virus protection monitor 38 
then searches the decrypted entries from the Registry 
table for an entry which matches the identifier received 

15 from the operating system for the starting process. If a 
match is found, this means that the starting process is 
authorized . The virus protection monitor 3 8 then 
instructs the operating system 3 6 to lift the suspension, 
i.e., to start executing this authorized process. These 

2 0 monitoring steps are transparent to the system operator, 

i.e., the suspension of process execution is removed 
without the system user ever knowing what happened. 

If the virus protection monitor 38 does not 
find an entry from the Registry table which matches the 
25 identifier received from the operating system for the 
starting process, then the virus protection monitor 38 
sends an Alert dialogue box to the video memory 11 for 
display. The Alert dialogue box contains a warning that 
the starting application is unknown to the scanner and 

3 0 may be a virus. The content of this displayed Alert 

dialogue box is generally shown in FIG. 6. The system 
operator is given three options respectively represented 
by the virtual Clean button 46, the virtual Cancel button 
48 and the virtual Add button 50. The system operator may 
35 elect to kill the process and remove the file that 
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started the process by clicking on Clean button 4 6 or may 
elect to kill the process without removing the file by 
clicking on Cancel button 48 or may elect to register the 
starting process in the Registry table by clicking on Add 
5 button 50. 

Returning to FIG. 4, if the system operator 
clicks on the Clean button using the operator interface 
22, the virus protection monitor 38 will instruct the 
operating system 36 to kill the suspicious process (i.e., 

10 prevent it from starting) and to remove the file that 
started the suspicious process from the hard disk 21. In 
addition, the virus protection monitor 3 8 places an entry 
in the virus log 34. If the system operator clicks on the 
Cancel button, the virus protection monitor 38 will 

15 instruct the operating system 36 to kill the suspicious 
process, and the user may continue as if nothing unusual 
had happened. The operating system 3 6 is not instructed 
to remove the file which started the suspicious process 
from the hard disk 21. Again, an entry is placed in the 

2 0 virus log 34 to record this event. If the operator clicks 
on the Add button, then a secondary Confirmation dialogue 
box (see FIG. 7) appears on the screen, overlying the 
primary dialogue box shown in FIG. 6. The Confirmation 
dialogue box asks the system operator to confirm that the 

25 suspicious process (application) should be registered in 
the Registry table 40. If the system operator selects the 
virtual Yes button 52, then the process will be 
registered in the Registry table to prevent the virus 
protection monitor 38 from flagging this process in the 

30 future, thereby treating this process as any other valid, 
registered process. An entry is made in the Virus log 34. 
If the user selects the virtual No button 54, then the 
Confirmation dialogue box disappears and the system 
operator is taken back to the Alert dialogue box shown in 

35 FIG. 6. 



11 



15-UL-5580 

To register the process, the identifying code 
previously received from the operating system 3 6 will be 
sent to the encrypter/ decrypt er 39 for encryption. The 
encrypted identifier is then written into the Registry 
5 table 40. 

While the invention has been described with 
reference to preferred embodiments, it will be understood 
by those skilled in the art that various changes may be 
made and equivalents may be substituted for elements 

10 thereof without departing from the scope of the invention. 
In addition, many modifications may be made to adapt a 
particular situation to the teachings of the invention 
without departing from the essential scope thereof. 
Therefore it is intended that the invention not be limited 

15 to the particular embodiment disclosed as the best mode 
contemplated for carrying out this invention, but that the 
invention will include all embodiments falling within the 
scope of the appended claims. 
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CLAIMS 

!• An ultrasound imaging system comprising a hard 
disk, an operating system and a virus scanner comprising 
means for detecting a file having an attribute of a virus 
before said file is installed on said hard disk by said 
operating system. 

2. The ultrasound imaging system as recited in 
claim 1, wherein said attribute is a checksum of said file. 

3. The ultrasound imaging system as recited in 
claim 1, wherein said attribute is a size of said file. 

4. The ultrasound imaging system as recited in 
claim 1, further comprising a display subsystem, wherein 
said virus scanner further comprises: 

means for actuating display of a graphical user 
interface by said display subsystem in response to 
detection of said file, said graphical user interface 
comprising a virus alert and a virtual actuator; and 

means for instructing said operating system to 
install said file in response to selection of said virtual 
actuator . 

5. The ultrasound imaging system as recited in 
claim 4, further comprising a log of virus detection 
events, wherein said virus scanner further comprises means 
for logging an entry in said log in response to selection 
of said virtual actuator. 

6. The ultrasound imaging system as recited in 
claim 1, further comprising: 

a registry containing information registering 
authorized processes; and 
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a virus protection monitor comprising means for 
suspending a process to be started by said operating 
system, means for receiving an identifier identifying said 
suspended process from said operating system, and means for 
detecting that said suspended process is not registered in 
said registry. 

7. The ultrasound imaging system as recited in 

claim 6, wherein said information in said registry is 

encrypted, further comprising a decrypt er arranged to 

decrypt encrypted information sent from said registry to 
said virus protection monitor. 

8- The ultrasound imaging system as recited in 
claim 6, further comprising a display subsystem, wherein 
said virus protection monitor further comprises means for 
actuating display of a first graphical user interface by 
said display subsystem in response to detection that said 
suspended process is not registered, said first graphical 
user interface comprising a virus alert and a virtual 
actuator . 

9. The ultrasound imaging system as recited in 
claim 8, wherein said virus protection monitor further 
comprises means for instructing said operating system to 
kill said suspended process in response to selection of 
said virtual actuator on said first graphical user 
interface . 

10. The ultrasound imaging system as recited in 
claim 9, further comprising a log of virus detection 
events, wherein said virus protection monitor further 
comprises means for logging an entry in said log in 
response to selection of said virtual actuator on said 
first graphical user interface. 

11. The ultrasound imaging system as recited in 
claim 9, wherein said virus protection monitor further 

14 
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comprises means for instructing said operating system to 
remove from said hard disk the file that started said 
suspended process in response to selection of said virtual 
actuator on said first graphical user interface* 

5 12. The ultrasound imaging system as recited in 

claim 8, wherein said virus protection monitor further 
comprises : 

means for actuating display of a second graphical 
user interface by said display subsystem in response to 
10 selection of said virtual actuator on said first graphical 
user interface, said second graphical user interface 
comprising a request for confirmation and a virtual 
actuator ; and 

means for adding information to said registry for 
15 registering said suspended process in response to selection 
of said virtual actuator on said second graphical user 
interf ace. 

13, The ultrasound imaging system as recited in 
claim 12, wherein said information in said registry is 

20 encrypted, further comprising an encrypter arranged to 
encrypt information sent from said virus protection monitor 
to said registry. 

14. An ultrasound imaging system comprising: 
a hard disk; 

25 a registry containing information registering 

authorized processes; and 

a computer programmed to perform the following 
steps: suspending a process to be started; and detecting 
that said suspended process is not registered in said 
30 registry. 
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15. The ultrasound imaging system as recited in 
claim 14, wherein said information in said registry is 
encrypted, said computer being further programmed to 
decrypt encrypted information read from said registry. 

16. The ultrasound imaging system as recited in 
claim 14, further comprising a display subsystem, wherein 
said computer is further programmed to actuate display of a 
first graphical user interface by said display subsystem in 
response to detection that said suspended process is not 
registered, said first graphical user interface comprising 
a virus alert and a virtual actuator. 

17. The ultrasound imaging system as recited in 
claim 16, wherein said computer is further programmed to 
kill said suspended process in response to selection of 
said virtual actuator on said first graphical user 
interface. 

18. The ultrasound imaging system as recited in 
claim 17, further comprising a log of virus detection 
events, wherein said computer is further programmed to log 
an entry in said log in response to selection of said 
virtual actuator on said first graphical user interface. 

19. The ultrasound imaging system as recited in 
claim 17, wherein said computer is further programmed to 
remove from said hard disk the file that started said 
suspended process in response to selection of said virtual 
actuator on said first graphical user interface. 

20. The ultrasound imaging system as recited in 
claim 16, wherein said computer is further programmed to 
perform the following steps: 

actuating display of a second graphical user 
interface by said display subsystem in response to 
selection of said virtual actuator on said first graphical 

16 
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user interface, said second graphical user interface 
comprising a request for confirmation and a virtual 
actuator ; and 

adding information to said registry for 
5 registering said suspended process in response to selection 
of said virtual actuator on said second graphical user 
interface. 

21. The ultrasound imaging system as recited in 
claim 20, wherein said information in said registry is 

10 encrypted, said computer being further programmed to 
encrypt information before placing it in said registry. 

22. A method of protecting an ultrasound imaging 
system against viruses, comprising the steps of: 

storing a registry on a hard disk, said registry 
15 containing information registering authorized processes; 

suspending a process to be started; and 

detecting that said suspended process is not 
registered in said registry. 

23. The method as recited in claim 22, wherein 
20 said information in said registry is encrypted, further 

comprising the step of decrypting information read from 
said registry. 

24. The method as recited in claim 22, further 
comprising the step of displaying a first graphical user 

25 interface in response to detection that said suspended 
process is not registered, said first graphical user 
interface comprising a virus alert and a virtual actuator. 

25. The method as recited in claim 24, further 
comprising the step of killing said suspended process in 

30 response to selection of said virtual actuator on said 
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first graphical user interface. 

26. The method as recited in claim 25, further 
comprising the step of placing an entry in a log of virus 
detection events in response to selection of said virtual 

5 actuator on said first graphical user interface. 

27. The method as recited in claim 25, further 
comprising the step of removing from said hard disk the 
file that started said suspended process in response to 
selection of said virtual actuator on said first graphical 

10 user interface. 

28. The method as recited in claim 24, further 
comprising the steps of: 

displaying a second graphical user interface in 
response to selection of said virtual actuator on said 
15 first graphical user interface, said second graphical user 
interface comprising a request for confirmation and a 
virtual actuator; and 

adding information to said registry for 
registering said suspended process in response to selection 
20 of said virtual actuator on said second graphical user 
interface. 

29. The method as recited in claim 28, wherein 
said information in said registry is encrypted, further 
comprising the step of encrypting information before 

25 placing it in said registry. 
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ULTRASOUND IMAGING SYSTEM 
HAVING VIRUS PROTECTION 

ABSTRACT OF THE DISCLOSURE 

An ultrasound imaging system is provided with 
virus protection. Each file that enters the system (via 
the hard disk or the networking port) is scanned to 
detect the presence of any virus in the file. Before each 
5 file is written to the hard disk of the scanner, the 
Checksum and Size of the file are verified, along with 
other virus-identifying attributes, to determine if the 
file is infected with a virus or if the file itself is a 
virus. If there is a discrepancy in either the Checksum 
10 or Size, then a dialogue box appears, warning the system 
operator that the file being installed may contain a 
virus. In order to provide additional protection for the 
ultrasound scanner, all processes starting to run on the 
scanner are monitored. Each time a new process is started 
15 on the scanner, virus protection monitoring software will 
suspend the process and search for encrypted data 
identifying the starting process in a Registry table. If 
the starting process is listed in the table, then the 
starting process is un-suspended without the user ever 
2 0 knowing what happened. If the virus protection monitor 
does not find a match in the table, then a dialogue box 
appears on the screen, warning the system operator that 
the application may be a virus. 
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COMBINED DECLARATION AND POWER OF ATTORNEY 
FOR PATENT APPLICATION 

As the below-named inventor, I hereby declare that: 
My residence, post office address and citizenship are as 
stated below under my name, 

I believe that I am the original, first and sole inventor 
of the subject matter which is disclosed and claimed in the 
patent application entitled ULTRASOUND IMAGING SYSTEM HAVING 
VIRUS PROTECTION, the specification of which is attached hereto, 
and for which a patent is sought. 

I hereby state that I have reviewed and understand the con- 
tents of the above- identified patent application, including the 
claims. 

I acknowledge the duty to disclose to the U.S. Patent and 
Trademark Office all information which is material to patent- 
ability (as defined in Title 37, Code of Federal Regulations, 
Section 1.56(a)) in connection with examination of this appli- 
cation. 

I hereby direct that all correspondence and telephone calls 
in connection with this application be addressed to: Dennis M. 
Flaherty, Esq., Ostrager Chong & Flaherty LLP, 825 Third Avenue, 
30th Floor, New York NY 10022-7519. 

I hereby appoint Christian G. Cabou (Reg. No. 35,467) and 
Phyllis Y. Price (Reg. No. 34,234), both of GE Medical Systems, 
3000 North Grandview Blvd., Waukesha, Wisconsin 53188; Ronald E. 
Myrick (Reg. No. 26,315), Jay L. Chaskin (Reg. No. 24,030) and 
Henry Policinski (Reg. No. 26,621), all of General Electric 
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Company (W3E) , 3135 Easton Turnpike, Fairfield, Connecticut 
06431-0001; Dennis M. Flaherty (Reg. No. 31,159), 825 Third 
Avenue, 30th Floor, New York New York 10022-7519; and Joshua S. 
Broitman (Reg. No. 38,006), 825 Third Avenue, 30th Floor, New 
York New York 10022-7519, jointly and severally, my attorneys, 
with full power of substitution, delegation and revocation, to 
prosecute this application, to make alterations and amendments 
therein, to receive the patent and to transact all business in 
the Patent and Trademark Office connected therewith. 

I hereby declare that all statements made herein of my own 
knowledge are true and that all statements made on information 
and belief are believed to be true; and further that these 
statements were made with the knowledge that willful false 
statements and the like so made are punishable by fine or 
imprisonment, or both, under Section 1001 of Title 18 of the 
United States Code and that such willful false statements may 
jeopardize the validity of the application or any patent issued 
thereon . 



Full name of sole inventor^^ CHARLES CAMERON BRACKETT 

Inventor's signature: Rf/y/c^b 
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Residence: Brookfield, Wisconsin 

Citizenship: United States of America 

Post Office Address: 17330 West River Birch Drive, #208 

Brookfield, WI 53045 
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